
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/A12190D8109411F1899116B2353D8C67.roa
File: A12190D8109411F1899116B2353D8C67.roa (raw, json)
Hash identifier: QIM5OQhz8QrW/58S7ybtOUdL75BxjSCO7dYUN29W8QE=
Subject key identifier: 1E:39:7C:CB:96:99:33:C5:71:3B:DE:35:07:2C:A0:32:91:E8:BB:BB
Certificate issuer: /CN=A919A909/serialNumber=D7210B6E99424A9E82A4D45002736F6483AA279A
Certificate serial: 0154
Authority key identifier: D7:21:0B:6E:99:42:4A:9E:82:A4:D4:50:02:73:6F:64:83:AA:27:9A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/A12190D8109411F1899116B2353D8C67.roa
Signing time: Sun 01 Mar 2026 15:21:14 +0000
ROA not before: Mon 23 Feb 2026 08:49:57 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 393448
IP address blocks: 160.22.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.crl
rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:44:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 340 (0x154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A909, serialNumber=D7210B6E99424A9E82A4D45002736F6483AA279A
Validity
Not Before: Feb 23 08:49:57 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a4596a-7a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cb:01:49:a5:4c:80:00:d5:9b:97:8d:00:c6:
76:f3:82:0b:10:7d:62:4b:a5:29:14:45:2d:03:14:
b6:27:5b:7d:f3:2b:b9:83:47:ff:1c:a7:d3:32:2c:
05:a6:27:40:a2:7b:c0:26:00:08:bf:ef:e0:30:ca:
d0:05:29:34:95:6e:d9:45:9b:e5:3f:8d:0a:fa:ee:
d3:34:de:08:e0:fc:53:4e:0b:20:e1:fb:82:22:5a:
dc:b7:5d:8f:4c:37:80:45:6b:cc:7a:1a:78:dd:0b:
a4:d8:dc:7f:bd:ee:fb:2f:f1:2d:49:8d:45:19:e4:
e9:8a:58:f0:1b:9d:7b:fd:60:7c:4e:bc:aa:f4:70:
b1:1a:09:22:11:9f:c6:b5:16:49:55:7b:39:8f:c8:
9e:42:6f:ff:c0:b8:97:58:e1:24:1c:e7:00:ed:1f:
9c:64:b0:f4:6b:3b:50:12:a8:e1:52:60:13:3d:20:
39:44:e2:2b:b1:cd:e0:7a:51:e8:53:d6:59:0d:3e:
77:1f:7c:9c:62:21:a4:44:25:27:41:ee:00:ee:95:
d1:44:a4:f0:cb:a9:e1:d3:ed:00:8f:75:86:c3:1c:
96:07:67:c5:91:9c:37:2e:d0:04:a1:13:5f:d5:bb:
c1:c1:4e:67:43:52:75:34:0f:3b:66:ee:62:67:ef:
82:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:39:7C:CB:96:99:33:C5:71:3B:DE:35:07:2C:A0:32:91:E8:BB:BB
X509v3 Authority Key Identifier:
keyid:D7:21:0B:6E:99:42:4A:9E:82:A4:D4:50:02:73:6F:64:83:AA:27:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/A12190D8109411F1899116B2353D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
160.22.156.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:e4:ea:42:90:7c:dc:90:30:14:6a:ca:2e:ea:d5:4a:5d:cc:
b3:06:d4:b3:6b:8c:78:68:9e:6e:09:7a:77:f0:e0:af:0d:07:
0f:f6:f5:67:6e:f1:0b:e1:31:2e:3b:44:d5:48:06:92:04:33:
a1:32:49:71:54:0b:0a:c7:df:56:6b:97:39:da:c6:bc:8b:ff:
bf:5c:3e:07:e9:79:7c:2f:b4:8d:7f:04:b1:47:ae:9b:11:e1:
6e:d2:1b:82:69:66:52:a4:b9:d5:91:21:d2:6b:d0:83:09:79:
02:32:3f:f1:b3:c7:83:b7:7f:69:43:38:d1:a5:8f:d7:6c:10:
aa:b1:0b:0a:4b:ec:84:5f:00:0d:19:e9:a6:11:87:9a:9c:1d:
bf:e6:47:f7:35:1e:70:ae:8a:fc:11:74:34:ff:7b:34:5e:b2:
0e:74:27:ba:3b:58:11:f0:01:c5:a5:0f:e8:4a:ef:ee:b4:a9:
61:f3:1d:32:55:71:87:e9:ca:f6:c6:d1:b8:35:f8:9f:9d:a6:
5a:3c:ed:dd:a6:f6:aa:2a:02:66:a3:4d:d5:2f:31:32:b2:e7:
2a:40:13:a7:83:a8:97:b3:48:9b:64:02:d1:45:45:68:a3:ee:
fb:4b:7a:6d:a8:fa:f5:88:56:7b:6c:0e:c8:98:27:62:b7:4f:
b8:ba:da:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:47:58 2026 by rpki-client